Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/kK51q-k4fOu1EScmurC872kjYwg.roa
File: kK51q-k4fOu1EScmurC872kjYwg.roa (raw, json)
Hash identifier: lYEElzIxonp3WxjaufJgAWqunkeM+Q8C2RDvoR9Jn9k=
Subject key identifier: 90:AE:75:AB:E9:38:7C:EB:B5:11:27:26:BA:B0:BC:EF:69:23:63:08
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 0185CA1A62BCC7516502D358D99109ADEA2E
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/kK51q-k4fOu1EScmurC872kjYwg.roa
Signing time: Thu 19 Jan 2023 12:56:44 +0000
ROA not before: Thu 19 Jan 2023 12:56:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.94.242.0/23 maxlen: 23
185.124.97.0/24 maxlen: 24
185.124.96.0/24 maxlen: 24
185.94.240.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:1a:62:bc:c7:51:65:02:d3:58:d9:91:09:ad:ea:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 19 12:56:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90ae75abe9387cebb5112726bab0bcef69236308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:48:f9:ac:50:39:8c:2c:1f:b8:fd:7b:c8:
c2:30:c6:00:e3:b0:f4:ff:33:a4:e1:f9:fa:11:b4:
aa:73:da:5d:7f:24:eb:bb:36:a9:37:28:cb:f9:22:
fb:7e:eb:80:a5:95:05:e3:5b:50:c6:e9:83:b2:4f:
5e:59:c1:33:05:e5:3e:44:b2:2d:3f:22:ff:e0:6f:
af:13:b6:92:84:90:01:de:73:9e:5b:1c:e3:25:c7:
be:21:9a:8a:49:0c:9f:f1:de:bf:b2:1f:9a:76:bc:
d2:df:bd:87:09:18:1f:48:fa:0c:a7:9f:ef:05:03:
08:da:b6:4c:34:29:d1:42:e7:db:20:8a:c4:03:9a:
94:40:d9:59:20:72:2b:d0:37:29:02:88:cb:29:b5:
9f:2f:3d:54:3f:a3:54:7e:7f:53:fe:84:91:d2:f7:
23:b4:36:34:7e:58:65:17:cd:2a:cb:cb:11:40:28:
c5:08:13:0b:6c:3b:16:68:28:40:95:85:e3:7c:44:
d5:70:c1:05:0f:05:8a:33:e1:8d:e3:94:08:f9:c5:
7b:3a:a6:2b:85:ce:8d:9c:bb:24:27:dd:bd:1c:af:
7b:88:3e:e4:27:87:0a:b0:1e:75:23:00:f3:14:fb:
de:84:c0:db:0b:d3:ce:31:84:2f:7f:90:89:d3:45:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AE:75:AB:E9:38:7C:EB:B5:11:27:26:BA:B0:BC:EF:69:23:63:08
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/kK51q-k4fOu1EScmurC872kjYwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.240.0/22
185.124.96.0/23
Signature Algorithm: sha256WithRSAEncryption
16:3a:d6:d6:77:ad:00:0d:c2:9f:c5:a9:80:fe:13:f3:75:a9:
47:f2:b1:46:5b:b0:ff:77:ba:81:00:fa:b6:d7:e9:f8:c6:51:
d1:d9:2f:79:f9:65:3a:f1:8f:a6:df:6e:6d:1b:21:42:95:0c:
48:f2:98:22:f0:f4:bb:7a:b4:67:5d:7c:7b:d2:dd:9b:66:20:
a4:84:af:dc:42:5f:a2:d0:07:7e:86:b1:69:02:67:3c:75:c9:
bc:54:e3:a2:9d:99:cb:9a:64:34:f4:05:5b:0c:b1:66:99:fa:
36:af:7e:fb:66:32:42:67:92:c1:de:4d:02:3a:f6:48:3c:18:
27:38:cd:c2:db:41:a0:97:7b:1e:a9:ce:4c:d9:1d:05:aa:6f:
7b:aa:41:b3:6e:2a:07:9e:18:29:be:50:58:bc:3c:10:d1:4f:
25:00:45:59:fa:b3:ae:4f:b2:5d:2d:8f:f7:d6:85:a4:bf:97:
9f:c8:4d:2a:0b:0c:50:a3:81:a7:19:8d:ac:7b:74:0c:33:52:
ec:2e:8b:15:82:ea:77:18:c7:bd:93:7a:fb:98:79:8b:b5:1e:
79:a5:1d:77:5f:5a:13:59:d7:b2:ca:79:91:d2:30:cf:da:93:
0f:33:6b:90:9b:49:79:14:9a:a4:83:f6:51:86:05:54:f7:7d:
f4:dc:59:57
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXKGmK8x1FlAtNY2ZEJreouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx
Y2FmYTQwHhcNMjMwMTE5MTI1NjQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGFlNzVhYmU5Mzg3Y2ViYjUxMTI3MjZiYWIwYmNlZjY5MjM2MzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN5I+axQOYwsH7j9e8jCMMYA47D0
/zOk4fn6EbSqc9pdfyTruzapNyjL+SL7fuuApZUF41tQxumDsk9eWcEzBeU+RLIt
PyL/4G+vE7aShJAB3nOeWxzjJce+IZqKSQyf8d6/sh+adrzS372HCRgfSPoMp5/v
BQMI2rZMNCnRQufbIIrEA5qUQNlZIHIr0DcpAojLKbWfLz1UP6NUfn9T/oSR0vcj
tDY0flhlF80qy8sRQCjFCBMLbDsWaChAlYXjfETVcMEFDwWKM+GN45QI+cV7OqYr
hc6NnLskJ929HK97iD7kJ4cKsB51IwDzFPvehMDbC9POMYQvf5CJ00WsSwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJCudavpOHzrtREnJrqwvO9pI2MIMB8GA1UdIwQY
MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt
MGU3MjQxNmI0ZGM3LzEva0s1MXEtazRmT3UxRVNjbXVyQzg3MmtqWXdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3
LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuV7wAwQB
uXxgMA0GCSqGSIb3DQEBCwUAA4IBAQAWOtbWd60ADcKfxamA/hPzdalH8rFGW7D/
d7qBAPq21+n4xlHR2S95+WU68Y+m325tGyFClQxI8pgi8PS7erRnXXx70t2bZiCk
hK/cQl+i0Ad+hrFpAmc8dcm8VOOinZnLmmQ09AVbDLFmmfo2r377ZjJCZ5LB3k0C
OvZIPBgnOM3C20Ggl3seqc5M2R0Fqm97qkGzbioHnhgpvlBYvDwQ0U8lAEVZ+rOu
T7JdLY/31oWkv5efyE0qCwxQo4GnGY2se3QMM1LsLosVgup3GMe9k3r7mHmLtR55
pR13X1oTWdeyynmR0jDP2pMPM2uQm0l5FJqkg/ZRhgVU93303FlX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:30 2024 by rpki-client on console-ams.rpki-client.org